Read the docs
TI-2026-68014 Aliases CVE-2026-57537GHSA-rw2p-f79q-94qj

Use after free in Qualcomm Snapdragon DSP service

Priority LOW 34CWE-416Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-416 and the CVSS impact.

Summary

Qualcomm Snapdragon products, including the models FastConnect 6900, FastConnect 7800, IQ10 Series, Pandeiro and QCA6595AU and other products, are affected. A use after free flaw (CWE-416) in the DSP service occurs when geographic mapping data is accessed and modified concurrently without proper synchronization, which corrupts memory. A local user with low privileges can trigger it, with high impact to confidentiality, integrity and availability.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0007 0th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QualcommSnapdragonFastConnect 6900; FastConnect 7800; IQ10 Series; Pandeiro; QCA6595AU; QCA6698AQ; QCA6797AQ; QCA8695AU; QCM8838; QLN1083BD; QLN1086BD; QPA1083BD; QPA1086BD; QXM1083; QXM1086; QXM1093; QXM1094; QXM1095; QXM1096; SAR1165P; SC8380XP; SD865 5G; SDR753; SM8750P; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5; Snapdragon AR1+ Gen 1 Platform; Snapdragon Ride Elite; Snapdragon XR2 5G Platform; Snapdragon XR2+ Gen 1 Platform; Snapdragon Cockpit Elite; Snapdragon Reality Elite Platform; Snapdragon Wear Elite platform; SW5100; SW5100P; SXR2230P; SXR2250P; Themisto; WCD9380; WCD9385; WCD9395; WCN3660B; WCN3680B; WCN3980; WCN3988; WCN7860; WCN7861; WCN7880; WCN7881; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H; X1E80100; XRV7209; XRV9209—No fix listedCNA
  • Snapdragon VendorQualcomm Affected FastConnect 6900; FastConnect 7800; IQ10 Series; Pandeiro; QCA6595AU; QCA6698AQ; QCA6797AQ; QCA8695AU; QCM8838; QLN1083BD; QLN1086BD; QPA1083BD; QPA1086BD; QXM1083; QXM1086; QXM1093; QXM1094; QXM1095; QXM1096; SAR1165P; SC8380XP; SD865 5G; SDR753; SM8750P; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5; Snapdragon AR1+ Gen 1 Platform; Snapdragon Ride Elite; Snapdragon XR2 5G Platform; Snapdragon XR2+ Gen 1 Platform; Snapdragon Cockpit Elite; Snapdragon Reality Elite Platform; Snapdragon Wear Elite platform; SW5100; SW5100P; SXR2230P; SXR2250P; Themisto; WCD9380; WCD9385; WCD9395; WCN3660B; WCN3680B; WCN3980; WCN3988; WCN7860; WCN7861; WCN7880; WCN7881; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H; X1E80100; XRV7209; XRV9209 Fixed in — No fix listed CNA

CPE configurations NVD · 144

CPEVersionsRoleVendor
cpe:2.3:o:qualcomm:congo_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:congo:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:orne_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:orne:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
  • cpe:2.3:o:qualcomm:congo_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:congo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:fastconnect_6200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:fastconnect_6200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:orne_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:orne:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
Show 134 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca6797aq:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qca8695au_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qca8695au:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qcm8838_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qcm8838:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qln1083bd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qln1083bd:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qln1086bd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qln1086bd:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qmp1000_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qmp1000:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qmp2001_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qmp2001:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qpa1083bd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qpa1083bd:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qpa1086bd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qpa1086bd:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:fastconnect_8800_mobile_connectivity_system_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:fastconnect_8800_mobile_connectivity_system:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qxm1083_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qxm1083:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qxm1086_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qxm1086:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qxm1093_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qxm1093:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qxm1094_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qxm1094:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qxm1095_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qxm1095:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:qxm1096_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:qxm1096:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sar1165p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sar1165p:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sc8380xp:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sdr753_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sdr753:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sm4875_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sm4875:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sm6850_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sm6850:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sm8845p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sm8845p:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sm8950_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sm8950:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sm8950p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sm8950p:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sm8975_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sm8975:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sm8975p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sm8975p:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_460_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_8_gen_5_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_8_gen_5:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_ar1\+_gen_1_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_ar1\+_gen_1_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_ride_elite_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_ride_elite:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_cockpit_elite_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_cockpit_elite:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_reality_elite_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_reality_elite_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:snapdragon_wear_elite_platform_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:snapdragon_wear_elite_platform:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:themisto_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:themisto:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn6450_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn6450:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn7760_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn7760:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wcn8841_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wcn8841:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8850_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8850:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8850w_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8850w:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:wsa8855c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:wsa8855c:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:xrv7209_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:xrv7209:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
cpe:2.3:o:qualcomm:xrv9209_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableQualcomm
cpe:2.3:h:qualcomm:xrv9209:-:*:*:*:*:*:*:*not specified by NVDRunning onQualcomm
  • cpe:2.3:o:qualcomm:pandeiro_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:pandeiro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca6797aq_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca6797aq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qca8695au_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qca8695au:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qcm8838_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qcm8838:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qln1083bd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qln1083bd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qln1086bd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qln1086bd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qmp1000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qmp1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qmp2001_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qmp2001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qpa1083bd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qpa1083bd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qpa1086bd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qpa1086bd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:fastconnect_8800_mobile_connectivity_system_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:fastconnect_8800_mobile_connectivity_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qxm1083_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qxm1083:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qxm1086_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qxm1086:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qxm1093_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qxm1093:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qxm1094_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qxm1094:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qxm1095_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qxm1095:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:qxm1096_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:qxm1096:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sar1165p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sar1165p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sc8380xp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sdr753_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sdr753:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sm4875_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sm4875:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sm6850_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sm6850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sm8845p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sm8845p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sm8950_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sm8950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sm8950p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sm8950p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sm8975_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sm8975:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sm8975p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sm8975p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_460_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_460_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_8_elite_gen_5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_8_elite_gen_5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_8_gen_5_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_8_gen_5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_ar1\+_gen_1_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_ar1\+_gen_1_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_ride_elite_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_ride_elite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_cockpit_elite_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_cockpit_elite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_reality_elite_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_reality_elite_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:snapdragon_wear_elite_platform_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:snapdragon_wear_elite_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:themisto_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:themisto:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn6450_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn6450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn7760_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn7760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn7860_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn7860:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wcn8841_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wcn8841:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8850_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8850w_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8850w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:wsa8855c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:wsa8855c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:xrv7209_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:xrv7209:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm
  • cpe:2.3:o:qualcomm:xrv9209_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Qualcomm
  • cpe:2.3:h:qualcomm:xrv9209:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Qualcomm

Remediation

The sources list no fixed version for Snapdragon.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

  1. 2026-10-06 Threatist record created from CVE-2026-57537
  2. 2026-10-06 Alias added: GHSA-rw2p-f79q-94qj
  3. 2026-10-06 CISA SSVC decision points changed
  4. 2026-10-06 Priority changed: MEDIUM → LOW

References

  • TI-2026-20407 Buffer Over-read in WLAN Firmware CVSS 3.1HIGH 7.5
  • TI-2026-68016 Buffer over-read in Qualcomm Snapdragon WLAN HAL CVSS 3.1HIGH 7.5
  • TI-2026-68015 Untrusted pointer dereference in Qualcomm Snapdragon graphics CVSS 3.1HIGH 7.8
  • TI-2026-20421 Buffer Over-read in WLAN Firmware CVSS 3.1HIGH 7.4
  • TI-2026-67911 Use after free in Windows WLAN Host on Qualcomm Snapdragon CVSS 3.1MEDIUM 6.7
  • TI-2026-67910 Out-of-bounds write in Qualcomm Snapdragon camera driver CVSS 3.1MEDIUM 6.7
See all 7 →

Sources